- 字符串
MSSE-%d-server模式. - rdata头部的管道名格式：
%c%c%c%c%c%c%c%c%cMSSE-%d-server
https://www.anquanke.com/post/id/228123#h2-6
https://blog.nviso.eu/2021/04/26/anatomy-of-cobalt-strike-dll-stagers/
LingGuGu
LingGuGu
MSSE-%d-server 模式.%c%c%c%c%c%c%c%c%cMSSE-%d-serverhttps://www.anquanke.com/post/id/228123#h2-6
https://blog.nviso.eu/2021/04/26/anatomy-of-cobalt-strike-dll-stagers/
Cobalt Strike样本的字符串特征
https://blog.pigeoooon.site/archives/259f491a-ca21-4fda-806e-d8360b14a220
Comments